Claude Code has gotten extremely good at finding security vulnerabilities, and this is only the beginning.
  • INeedMana@piefed.zipEnglish
    551·
    14 hours ago

    I can’t report because I haven’t validated them yet… I’m not going to send [the Linux kernel maintainers] potential slop

    That’s worth pointing out IMO

    • codeinabox@programming.devOPEnglish
      12·
      13 hours ago

      Though that quote is followed by this, which indicates at least five of those vulnerabilities were real:

      I searched the Linux kernel and found a total of five Linux vulnerabilities so far that Nicholas either fixed directly or reported to the Linux kernel maintainers, some as recently as last week:

      • entwine@programming.dev
        10·
        9 hours ago

        I wonder how true that is. The author of this blog post seems to just be taking this guy’s word for it. Did Anthropic actually confirm the bug exists by trying to trigger it on real systems, or are they assuming it’s real because it looks plausible? The report claims you cam do it with two cooperating NFS clients, so did they actually do that, or are they just assuming it’ll work?